Story Tag: api-gateway

Stories Tag: api-gateway

API Authentication Using Istio Ingress Gateway, OAuth2-Proxy and Keycloak (Part 2 of 2) | by Senthil Raja Chermapandian | Aug,...

admin 2 months ago in

This blog is a sequel to my previous blog on the same topic: API Authentication Using Istio Ingress Gateway, OAuth2-Proxy and Keycloak (Part 1 of 2). In Part1, I discussed a solution to authenticate a user accessing an application or API, using Istio Ingress Gateway, OAuth2-Proxy and Keycloak. In this blog I’ll provide configuration details of the solution i.e. how each of these components need…

API Authentication Using Istio Ingress Gateway, OAuth2-Proxy and Keycloak | by Senthil Raja Chermapandian | Aug, 2021 | Medium

admin 2 months ago in

In my previous blog post titled “API Access Control using Istio Ingress Gateway”, I explained how to implement an API access control solution using Istio Ingress Gateway. Istio uses JWT Access token attached to the API request, to validate the request and enforce access control (authorization) policies. This determine whether the request should be allowed or denied. The solution’s prerequisites were a successfully authenticated user…

Security Release: Emissary-ingress & Edge Stack 1.14.1, 2.0.2 Developer Preview | by Kelsey Evans | Aug, 2021 | Ambassador Labs

admin 2 months ago in

Envoy Proxy CVE-2021–32777, CVE-2021–32779, CVE-2021–32781, CVE-2021–32778 high severity vulnerabilities addressed Today we’re releasing Ambassador Edge Stack 1.14.1 and Edge Stack 2.0.2 in Developer Preview to address multiple high severity security vulnerabilities in Envoy Proxy. In addition, we have updated Ambassador Cloud. Users who use personal intercepts or preview URLs with Telepresence will be automatically update. We recommend that all Emissary-ingress and Edge Stack users upgrade….

K8s Gateway API (II): 使用在對外的加密連線. 上一篇聊到我們如何透過GCP的Internal Http… | by Shawn Ho | 輕鬆小品-k8s的點滴 | Aug, 2021 | Medium

admin 3 months ago in

上一篇聊到我們如何透過GCP的Internal Http LoadBalancer來達成跨叢集與服務，也讓大家做了一個暖身運動。如果大家還記得，GCP提供了以下四種GatewayClass，這一篇的這點轉移到External Http LoadBalancer的實作，同時我們也分享如何在Gateway API上綁定MTLS的加密憑證。: [註記] 目前筆者測試gke-l7-rilb功能叫gke-l7-gxlb為多。舉例，目前Gateway CRD裡的 spec.listeners.namespaces=”from: All” 尚無法在gke-l7-gxlb支援。也因此這個beta測試中gateway與httproute 僅能與k8s服務在同樣的名稱空間 為了驗證連線，我們跟前一篇一樣部署三個K8S服務，來測試Gateway的Traffic Redirection. 這裡需要注意：GatewayClassName應指定為gke-l7-gxlb，另外，需要綁定前個步驟所發佈的ssl-certificates。 部署成功後，可以通過kubectl describe gtw external-http查看部署狀態，預期應看到SYNC on default/external-http was a success. 當部署Gateway後，也會看到Gateway API很貼心的幫大家部署了一個Default 404的backendconfig，當無法連線時會預設導到這個後端。 開始我們的簡單測試

The modern flows of connectivity — API Gateways and Service Meshes | by Marino Wijay | Jul, 2021 | Medium

admin 3 months ago in

Let’s talk about connectivity… Over the last several years, we’ve seen the rise of cloud-native patterns, which map to running microservices in the form of containers. Those containers are likely to be run on a ubiquitous and widely known platform, Kubernetes — or K8S for short. This post isn’t about K8S, it’s about how these microservices transact, and how end-users and other applications may interact…

Deploy Appbase.io To Any Kubernetes Environment With A Helm Chart | by Siddharth Kothari | Jul, 2021 | All things...

admin 4 months ago in

Appbase.io’s data plane can now be installed to any Kubernetes environment (cloud, managed, local with minikube) with our new helm chart. Appbase.io supercharges Elasticsearch to power app search experiences. It acts as an API gateway: augmenting search relevance with a declarative API, query rules that can be customized beyond Elasticsearch’s BM25 scoring algorithm, out-of-the-box telemetry support for rich search analytics/insights and access control policies that…

Ambassador Labs Open Source Update: Emissary-Ingress, Telepresence, and Argo | by Bjorn Freeman-Benson | Jun, 2021 | Ambassador Labs

admin 4 months ago in

At Ambassador Labs we rely heavily on our open source community to provide feedback and guidance so that we can make the best products for the largest possible audience. Open source has always been the foundation of our business. Today we’re excited to announce several new initiatives and product enhancements to support and grow our open source communities. Over the past year, we’ve seen continued…

API Gateways and Ingresses: What do they do? Do they do things? Let’s find out! | by Juan Diego Palomino...

admin 5 months ago in

Some of the coolest newspeak terms of cloud computing’s era are API Gateways and Ingresses. There are tons of popular projects that refer to themselves as such (e.g. Ambassador, Nginx Ingress, Istio’s Gateway, Gloo, AWS Load Balancer Controller, Traefik, Kong has both as separate products, etc…). Managers have accepted the terms as buzzwords to get excited about, and folks have started naming their children after…

Secure your Your Microservices Using Kong and Kubernetes | by ben sassi mohammed | May, 2021 | Medium

admin 5 months ago in

An API key or application programming interface key is a code that gets passed in by computer applications. The program or application then calls the API or application programming interface to identify its user, developer or calling program to a website. Application programming keys are normally used to assist in tracking and controlling how the interface is being utilized. Often, it does this to prevent…

Announcing Telepresence 2.2.0, Emissary-Ingress & Edge Stack 1.13.0 | by Bjorn Freeman-Benson | Apr, 2021 | Ambassador Labs

admin 6 months ago in

Today, we’re excited to make several product announcements related to Telepresence, Emissary-Ingress, and Edge Stack. Over the past two months, our team has focused on a number of new features as well as “fit and finish” improvements to help developers code, ship, and run apps on Kubernetes. You’ll continue to see this pattern in releases from Ambassador in the future. As the Cloud Native Computing…